diff --git a/.custodian-brief.md b/.custodian-brief.md
index 65b8a79..fc4703b 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — railiance-platform
 
 **Domain:** financials  
-**Last synced:** 2026-08-22 19:53 UTC  
+**Last synced:** 2026-08-23 10:51 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -14,6 +14,12 @@ Progress: 2/4 done  |  workplan_id: `88c4ef7f-0af8-580e-90dc-a2bae2675a4d`
 - ► T02 — Define the runtime database lease recovery exercise  `caba7fcd`
 - ► T03 — Define the coordinated railiance01 reboot exercise  `09cf4065`
 
+### Retract public OpenBao listener behind operator-only access
+Progress: 2/3 done  |  workplan_id: `6f8a6cbc-c076-5f0a-ade2-281a7ec71360`
+
+**Open tasks:**
+- ! T03 — Complete the attended operator cutover  `99f8b41f`
+
 ---
 ## MCP Orientation (when available)